CVE-2026-98528gpio: cdev: fix kernel stack leak to user-space in error path
Updated under an hour ago ()
Does this affect you?
It affects Linux. Add what you run to find out whether that includes you.
No exploitation reported and no EPSS estimate yet.
Do this next
Free account, 1 product
In the Linux kernel, the following vulnerability has been resolved: gpio: cdev: fix kernel stack leak to user-space in error path If we fail to acquire the GPIO chip guard in gpio_desc_to_lineinfo(), we return immediately before zeroing the info struct we'll end up passing to the user-space later in lineinfo_get_v1(). This may leak the kernel stack contents. Make gpio_desc_to_lineinfo() return int so that the -ENODEV returned on failure to acquire the guard can be propagated to the callers. While not strictly necessary: move the memset() before trying to acquire the SRCU read lock too for good measure.
- CVSS
- Not yet scored
- Weakness (CWE)
- Not given
- Known exploited
- Not in CISA's KEV catalog
- EPSS (exploitation in the next 30 days)
- Not loaded for this CVE
- Assigned by
- Linux
- NVD analysis
- Received
- Record last updated
- Oct 18, 2026
- First seen by InfoSec Signals
- Oct 18, 2026
Affected products
Linux Linux linux:linux (from the name) | from d83cee3d2bb131c7fca7e19f1e33dc7530fd7083 before 8460ee5216ab9a38263b01dca4b0a27e083f70f3; from d83cee3d2bb131c7fca7e19f1e33dc7530fd7083 before cf3d043582e106a0e57002bec8a6de8929ba3e1c; from d83cee3d2bb131c7fca7e19f1e33dc7530fd7083 before 60a466f231905cd96ae6f0f3c44a710c97873dac; from d83cee3d2bb131c7fca7e19f1e33dc7530fd7083 before 1feb5d39b05afd902ed9fc902ec5b15be03a4bdb | CNA record |
References
- https://git.kernel.org/stable/c/8460ee5216ab9a38263b01dca4b0a27e083f70f3
- https://git.kernel.org/stable/c/cf3d043582e106a0e57002bec8a6de8929ba3e1c
- https://git.kernel.org/stable/c/60a466f231905cd96ae6f0f3c44a710c97873dac
- https://git.kernel.org/stable/c/1feb5d39b05afd902ed9fc902ec5b15be03a4bdb
The CVE record on cve.org NVD's entry
The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.